Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/wuhWq-E4W1omBo-rZdsYlRFkLbQ.mft
File:                     wuhWq-E4W1omBo-rZdsYlRFkLbQ.mft (raw, json)
Hash identifier:          dlkkJ4SZaA+5Nv4HuAJ26YQtV9E89LNIV2GQv36OrY4=
Subject key identifier:   B8:42:A4:A2:2B:F2:6C:EB:46:88:18:EB:5B:A1:FC:FF:B2:8C:39:DA
Authority key identifier: C2:E8:56:AB:E1:38:5B:5A:26:06:8F:AB:65:DB:18:95:11:64:2D:B4
Certificate issuer:       /CN=A91F66B3/serialNumber=C2E856ABE1385B5A26068FAB65DB189511642DB4
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuhWq-E4W1omBo-rZdsYlRFkLbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/wuhWq-E4W1omBo-rZdsYlRFkLbQ.mft
Manifest number:          013C
Signing time:             Mon 13 Feb 2023 01:11:20 +0000
Manifest this update:     Mon 13 Feb 2023 01:11:20 +0000
Manifest next update:     Mon 20 Feb 2023 01:11:20 +0000
Files and hashes:         1: wuhWq-E4W1omBo-rZdsYlRFkLbQ.crl (hash: 6OTSibmed2voxwmWVLnCTactjXk1TYKuSa6i9ieM27I=)
                          2: BBBC88D6EE3211ECBF16BF22C4F9AE02.roa (hash: gIDE07gn352b2yTEcUx0jc6gb3nEWR9SrAIHWXxYWS4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F66B3/serialNumber=C2E856ABE1385B5A26068FAB65DB189511642DB4
        Validity
            Not Before: Feb 13 01:11:20 2023 GMT
            Not After : Feb 20 01:11:20 2023 GMT
        Subject: CN=63e98e38-11c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:cc:5d:17:dd:7c:aa:4a:86:ec:2e:ce:7e:
                    39:70:94:6e:33:50:df:20:9f:1a:c4:06:03:bd:c2:
                    7f:d5:45:01:bd:bf:bc:5c:6a:66:66:34:fd:a6:af:
                    7e:8c:2a:36:87:46:22:e8:bd:b9:fc:60:70:38:53:
                    ef:66:36:9c:14:de:41:c6:77:aa:1b:cf:13:98:e0:
                    d3:c2:36:0a:cc:b9:53:64:db:44:8c:18:cf:bb:4a:
                    b0:a7:80:d3:6b:25:2b:3a:fe:1b:54:45:22:ba:85:
                    d4:00:c4:c5:c6:b8:91:39:17:c5:7b:e5:60:ff:2a:
                    d6:c0:47:dc:e8:75:f3:b7:b4:8a:b4:dc:45:b8:53:
                    1d:cb:0c:80:ec:11:0a:00:cc:05:b4:a5:b8:0d:d4:
                    d4:ec:60:91:f4:c7:bd:a1:d6:80:a1:55:2a:85:c0:
                    35:db:94:7c:07:ad:ec:fe:09:b8:fd:ea:82:34:0f:
                    7b:1a:96:54:5c:e9:26:46:45:d7:8e:f9:0a:4a:5c:
                    3c:8c:82:4d:4f:58:88:d1:69:2b:43:0c:95:ac:26:
                    90:de:f5:57:41:6a:7b:82:71:33:69:3a:f0:c2:f0:
                    26:44:7c:94:2a:a7:17:ca:e8:05:4b:ed:24:03:dd:
                    94:71:5f:7a:ea:0b:6a:36:0a:b5:27:76:89:23:19:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:42:A4:A2:2B:F2:6C:EB:46:88:18:EB:5B:A1:FC:FF:B2:8C:39:DA
            X509v3 Authority Key Identifier:
                keyid:C2:E8:56:AB:E1:38:5B:5A:26:06:8F:AB:65:DB:18:95:11:64:2D:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/wuhWq-E4W1omBo-rZdsYlRFkLbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuhWq-E4W1omBo-rZdsYlRFkLbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/wuhWq-E4W1omBo-rZdsYlRFkLbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:77:d3:ea:08:f9:8b:ab:5a:a9:a2:93:03:f5:2a:d2:f3:
         d9:3d:01:9f:70:68:9d:9a:fd:33:58:bf:20:8b:99:7e:e9:72:
         2a:80:a5:8d:1d:f1:fc:70:f1:21:fe:94:5a:04:a6:07:69:4c:
         1b:43:cb:9a:a7:20:10:50:ae:31:3c:81:05:f9:10:a6:c3:a4:
         2d:17:db:90:7a:3a:a7:bb:cd:a7:d3:7d:43:a0:bf:02:64:d6:
         07:fa:41:cd:33:ae:71:ea:bb:12:b8:2f:78:9f:65:26:0b:fc:
         f6:e4:32:22:90:26:d5:a4:cd:a0:d0:61:01:72:d0:32:b4:3b:
         63:ad:82:a4:4b:b2:5a:16:65:2a:5f:8c:09:50:65:98:cb:c3:
         4a:2b:32:4f:18:02:39:9f:b0:ad:6f:4f:85:92:67:fe:54:22:
         e2:21:3e:a6:fd:f2:3b:88:98:9f:00:3b:f1:ae:b3:f6:1f:ad:
         dd:8f:67:f3:cf:d4:90:85:14:c0:f9:fc:b7:69:76:8f:2f:3b:
         1e:65:8d:11:17:5b:44:5e:52:c2:e2:b0:a0:ed:ec:06:09:5a:
         75:37:01:24:c4:f3:0d:6b:5e:2c:18:4d:91:d8:40:5e:60:19:
         ba:e0:57:5e:9b:4d:1f:58:bc:ff:00:47:e7:17:bb:02:d2:45:
         e2:cf:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----